This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json) Hash identifier: fStWtFoU1uVbKVCCM5zw8x0jaEqPShAN/StHhFL1Z3U= Subject key identifier: BF:ED:D7:46:D7:DB:56:16:C4:1B:B2:81:34:54:D0:8D:3F:19:9B:91 Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0 Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0 Certificate serial: 019C4321FF004336F6EB62012533957EEED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft Manifest number: 0AA4 Signing time: Mon 09 Feb 2026 16:00:27 +0000 Manifest this update: Mon 09 Feb 2026 16:00:27 +0000 Manifest next update: Tue 10 Feb 2026 16:00:27 +0000 Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: oWYf8EA+0d1W27MCFu+gbqVN93VquodsppLbzOO4I5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ff:00:43:36:f6:eb:62:01:25:33:95:7e:ee:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0 Validity Not Before: Feb 9 16:00:27 2026 GMT Not After : Feb 10 16:00:27 2026 GMT Subject: CN=bfedd746d7db5616c41bb2813454d08d3f199b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:81:e5:99:71:7c:80:a0:74:ee:a7:31:90: 6f:14:12:cb:dd:ea:89:86:41:f0:86:41:89:de:fe: e2:49:5c:2a:e1:4f:25:06:6e:cc:fb:77:b3:1b:31: 98:06:e7:07:77:12:37:4a:ae:63:7a:a2:79:43:ee: cb:ad:5b:43:a7:0f:ec:c6:16:58:12:40:ef:13:be: ee:0d:c9:0c:7e:ab:02:3f:01:40:ae:ac:3b:6e:b6: 6b:9c:cd:4c:4b:08:9e:4c:9e:ee:fb:93:ed:04:66: 62:e6:f6:a0:13:1a:1d:4c:5c:74:ff:af:ae:fe:0c: fe:34:4d:db:9b:fd:d7:4d:31:8d:f0:b1:01:ce:21: 2d:71:12:8e:d2:c8:9d:55:95:7b:c7:7f:25:b6:ac: 4b:d5:21:7b:2d:a2:18:d0:ca:2b:0d:d8:d1:c0:67: 49:7a:24:a5:12:4f:10:12:50:c9:1e:a6:28:d8:91: c9:40:ff:94:0d:a3:b1:d5:ee:51:ff:c8:03:ba:ae: 38:0f:11:41:46:d1:8b:d4:4b:c2:d9:7a:a7:b0:d9: e6:9d:45:6b:fb:15:8a:b3:cb:74:93:79:10:ce:51: d4:9a:ef:85:e5:8d:59:9b:86:d7:d0:9c:db:98:d8: 94:c6:41:b8:f3:ff:d6:89:de:a7:b4:c5:e7:7c:b0: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:ED:D7:46:D7:DB:56:16:C4:1B:B2:81:34:54:D0:8D:3F:19:9B:91 X509v3 Authority Key Identifier: keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:27:c6:08:01:ff:af:0a:95:78:55:25:16:b9:fd:90:4a:ac: 75:2a:cc:3a:9c:bb:8d:c3:86:6c:e6:8a:8b:54:cc:70:0f:4e: 26:e7:a9:e0:bb:09:b5:32:91:fe:23:8d:7a:f8:7a:4a:64:b2: 50:51:49:ad:76:80:b1:39:58:43:3f:57:40:5e:f3:ce:f1:18: 2d:10:83:8e:88:c1:cc:3c:a2:f7:b8:54:5e:29:64:a5:7a:21: 54:7f:e6:cd:d1:b4:13:60:80:8a:fc:2c:bb:38:05:86:00:79: 70:d0:94:f6:4d:98:0e:25:97:c7:33:e9:b5:aa:9f:da:91:df: fd:6c:b0:e0:9d:81:0d:db:a9:c6:ed:a5:da:bc:11:c6:6c:48: 3d:3e:4d:01:0d:da:09:cc:2a:ad:8e:2d:f2:b9:7a:dc:b8:f6: 0c:1e:28:d9:7f:48:d1:e9:12:61:7c:c4:d3:b1:63:d9:49:6e: 6a:00:50:29:53:a4:cb:3e:21:d7:6b:6a:36:85:25:cc:17:40: 64:5c:eb:35:63:d9:1a:37:d7:a1:d7:cc:ec:bf:49:ae:70:84: 16:ff:63:cc:52:26:39:3b:2f:19:bb:7b:da:95:86:83:72:a0: 5c:08:44:2f:a9:f9:46:83:15:90:3b:54:96:26:69:5c:a1:aa: 46:e7:57:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIf8AQzb262IBJTOVfu7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMDAyYzQ0NzliYjRjOTZlMjIzNDM5OWNlNzFmNTYwMzQ1 Mjk5ZDAwHhcNMjYwMjA5MTYwMDI3WhcNMjYwMjEwMTYwMDI3WjAzMTEwLwYDVQQD EyhiZmVkZDc0NmQ3ZGI1NjE2YzQxYmIyODEzNDU0ZDA4ZDNmMTk5YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXaB5ZlxfICgdO6nMZBvFBLL3eqJ hkHwhkGJ3v7iSVwq4U8lBm7M+3ezGzGYBucHdxI3Sq5jeqJ5Q+7LrVtDpw/sxhZY EkDvE77uDckMfqsCPwFArqw7brZrnM1MSwieTJ7u+5PtBGZi5vagExodTFx0/6+u /gz+NE3bm/3XTTGN8LEBziEtcRKO0sidVZV7x38ltqxL1SF7LaIY0MorDdjRwGdJ eiSlEk8QElDJHqYo2JHJQP+UDaOx1e5R/8gDuq44DxFBRtGL1EvC2XqnsNnmnUVr +xWKs8t0k3kQzlHUmu+F5Y1Zm4bX0JzbmNiUxkG48//Wid6ntMXnfLBFvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/t10bX21YWxBuygTRU0I0/GZuRMB8GA1UdIwQY MBaAFFwALER5u0yW4iNDmc5x9WA0UpnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYt NzFjNTcwZGNiMGE0LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYtNzFjNTcwZGNiMGE0 LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyfGCAH/ rwqVeFUlFrn9kEqsdSrMOpy7jcOGbOaKi1TMcA9OJuep4LsJtTKR/iONevh6SmSy UFFJrXaAsTlYQz9XQF7zzvEYLRCDjojBzDyi97hUXilkpXohVH/mzdG0E2CAivws uzgFhgB5cNCU9k2YDiWXxzPptaqf2pHf/Wyw4J2BDdupxu2l2rwRxmxIPT5NAQ3a CcwqrY4t8rl63Lj2DB4o2X9I0ekSYXzE07Fj2UluagBQKVOkyz4h12tqNoUlzBdA ZFzrNWPZGjfXodfM7L9JrnCEFv9jzFImOTsvGbt72pWGg3KgXAhEL6n5RoMVkDtU liZpXKGqRudXVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:45 2026 by rpki-client